This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft File: htqvTmjTIiSCMFRM2NspVo5s8AM.mft (raw, json) Hash identifier: i8Lrl7mIJnP1UNZyLm0Lh9dkptveeSJmvf+uOU+qN5c= Subject key identifier: 4C:7B:61:8E:5E:31:37:E4:48:63:30:CB:9F:E1:8F:9C:20:6A:2B:84 Authority key identifier: 86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03 Certificate issuer: /CN=86daaf4e68d322248230544cd8db29568e6cf003 Certificate serial: 019AF31CE1F8310950AB8E2F4F0EA4741FA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:02:27 +0000 Manifest this update: Sat 06 Dec 2025 10:02:27 +0000 Manifest next update: Sun 07 Dec 2025 10:02:27 +0000 Files and hashes: 1: htqvTmjTIiSCMFRM2NspVo5s8AM.crl (hash: 7lwibYFYsS3u/wmokBwMgJXVh9Omdh/ypKifobVOJac=) 2: uiT-f1UkP8u3VtHM1H2WjnfclYk.roa (hash: tX+V4MHF7T2iULGYZ2/cXlHTKSsA+WHHf7K/tt0Vdcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:e1:f8:31:09:50:ab:8e:2f:4f:0e:a4:74:1f:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86daaf4e68d322248230544cd8db29568e6cf003 Validity Not Before: Dec 6 10:02:27 2025 GMT Not After : Dec 7 10:02:27 2025 GMT Subject: CN=4c7b618e5e3137e4486330cb9fe18f9c206a2b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f8:c4:df:a2:77:a3:43:b0:b7:42:ef:ce:c3: aa:e5:41:2a:18:99:a7:dd:a2:26:e3:51:c7:62:07: 1a:d2:a9:99:e7:ec:5e:a2:2d:6b:5e:8b:77:c6:4d: 23:d9:41:09:88:23:e5:5a:4f:1b:74:b9:b0:35:b9: 1d:31:92:c2:0d:6c:c6:f3:0f:5c:2e:83:7d:fd:64: 49:f9:80:59:47:8e:dd:76:ec:f8:ef:1e:65:a4:b9: b0:95:39:62:e2:7f:3d:57:4c:af:76:28:18:25:45: ae:64:c2:e2:ff:49:95:85:d0:79:af:e2:50:62:dc: d3:d7:17:ec:30:a3:50:e1:da:d5:c6:2e:be:b6:57: ba:76:d0:51:ce:03:ad:cc:ef:1a:d8:f1:36:78:d3: 23:21:73:92:0a:8e:b7:db:30:f7:46:07:6c:b1:47: 93:37:f3:02:13:d4:9b:3a:6a:79:fa:3e:5c:ca:0c: 3d:84:89:37:d2:5d:28:71:9f:88:a0:c5:a4:0a:94: 75:e8:79:49:24:09:55:1a:06:df:02:57:75:4d:11: 2b:e6:d8:1e:52:70:46:ce:64:33:7b:06:5a:b5:04: 10:c8:b1:f1:0e:66:cc:d7:d4:f6:e4:74:a8:f2:b8: 56:4b:11:dc:18:f5:54:08:fd:4c:ab:ef:35:f5:ec: 27:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7B:61:8E:5E:31:37:E4:48:63:30:CB:9F:E1:8F:9C:20:6A:2B:84 X509v3 Authority Key Identifier: keyid:86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:d5:fe:da:62:e6:2e:02:34:f7:3f:4e:a8:21:8b:4e:30:2c: 60:7c:be:d5:00:08:90:77:73:5a:92:42:5f:dc:19:f8:40:cc: 37:3d:a4:9e:00:c4:5b:ce:95:db:8d:a7:1f:16:84:5a:f4:9f: 8e:72:ed:3e:f0:5e:36:b0:94:75:70:71:aa:8a:e6:23:db:a7: e0:c1:27:75:ab:e7:8d:ec:a5:e3:4e:c0:e8:82:11:34:59:11: 78:57:06:80:16:78:90:9b:42:7e:9c:f5:39:50:fb:b1:e1:0e: 8d:e0:82:1e:fd:64:04:9a:6c:4b:f0:a8:41:4e:9b:8a:f7:81: 00:0e:50:75:e7:7a:96:8d:ef:af:42:6f:76:1a:8a:3a:3f:d4: fe:a3:01:8e:0c:f7:08:22:a5:06:96:6d:1e:df:91:57:8f:0f: 0f:f9:f1:77:0a:73:99:13:94:31:45:57:76:ac:32:a0:4f:db: e7:41:47:55:be:14:78:b3:b8:33:6d:5f:d9:e7:bd:18:e2:65: 0f:14:10:f9:f2:61:b1:bf:fc:59:6e:2a:ad:ae:96:1b:5d:3a: 7a:95:33:e6:a5:a4:8a:f2:92:ce:ae:d7:a7:a5:fc:16:3e:b8: 2a:93:ea:9e:61:de:1b:2d:d4:ed:64:f6:f7:0a:eb:25:d3:25: f6:24:14:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHOH4MQlQq44vTw6kdB+lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZGFhZjRlNjhkMzIyMjQ4MjMwNTQ0Y2Q4ZGIyOTU2OGU2 Y2YwMDMwHhcNMjUxMjA2MTAwMjI3WhcNMjUxMjA3MTAwMjI3WjAzMTEwLwYDVQQD Eyg0YzdiNjE4ZTVlMzEzN2U0NDg2MzMwY2I5ZmUxOGY5YzIwNmEyYjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPjE36J3o0Owt0LvzsOq5UEqGJmn 3aIm41HHYgca0qmZ5+xeoi1rXot3xk0j2UEJiCPlWk8bdLmwNbkdMZLCDWzG8w9c LoN9/WRJ+YBZR47dduz47x5lpLmwlTli4n89V0yvdigYJUWuZMLi/0mVhdB5r+JQ YtzT1xfsMKNQ4drVxi6+tle6dtBRzgOtzO8a2PE2eNMjIXOSCo632zD3RgdssUeT N/MCE9SbOmp5+j5cygw9hIk30l0ocZ+IoMWkCpR16HlJJAlVGgbfAld1TREr5tge UnBGzmQzewZatQQQyLHxDmbM19T25HSo8rhWSxHcGPVUCP1Mq+819ewn+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEx7YY5eMTfkSGMwy5/hj5wgaiuEMB8GA1UdIwQY MBaAFIbar05o0yIkgjBUTNjbKVaObPADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRxdlRtalRJaVNDTUZSTTJOc3BWbzVzOEFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81N2QxZGItZDhlYi00OWUwLTgxMzMt NWJjOTA1MDVkOGNhLzEvaHRxdlRtalRJaVNDTUZSTTJOc3BWbzVzOEFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS81N2QxZGItZDhlYi00OWUwLTgxMzMtNWJjOTA1MDVkOGNh LzEvaHRxdlRtalRJaVNDTUZSTTJOc3BWbzVzOEFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9X+2mLm LgI09z9OqCGLTjAsYHy+1QAIkHdzWpJCX9wZ+EDMNz2kngDEW86V242nHxaEWvSf jnLtPvBeNrCUdXBxqormI9un4MEndavnjeyl407A6IIRNFkReFcGgBZ4kJtCfpz1 OVD7seEOjeCCHv1kBJpsS/CoQU6biveBAA5Qded6lo3vr0JvdhqKOj/U/qMBjgz3 CCKlBpZtHt+RV48PD/nxdwpzmROUMUVXdqwyoE/b50FHVb4UeLO4M21f2ee9GOJl DxQQ+fJhsb/8WW4qra6WG106epUz5qWkivKSzq7Xp6X8Fj64KpPqnmHeGy3U7WT2 9wrrJdMl9iQUMA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:17:04 2025 by rpki-client